IS342 Management of IA

Course Description.

This course examines management aspects of information assurance, including standards for security products, policy guidelines, security awareness, ethical decision-making, employment practices and policies, operations security and production controls, e-mail and Internet use policies, working with law enforcement, using social psychology to implement security policies, and auditing computer security. The course includes sections on detection of security breaches, methods of remediation such as computer emergency quick-response teams, backups and archives, business continuity planning, disaster recovery planning and insurance. Students examine fundamentals of management responsibilities and liabilities and risk assessment methodologies. The course ends with a review of current hot topics in the field such as medical records security, censorship, privacy, and anonymity.

IS340 (Introduction to Information Assurance) is recommended but not required as a prerequisite.

Last taught by MK in Spring 2007.